Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
File:                     3F67057F77B86603B6C216FF577CB3146053E4E5.mft (raw, json)
Hash identifier:          R57pKCSuWz/2oQ2ADu8P1tkztmuogtLTFfWa8c0gRRs=
Subject key identifier:   FB:83:17:C0:C5:67:58:F3:F4:53:82:5E:F5:78:7A:CE:58:43:A7:F8
Authority key identifier: 3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5
Certificate issuer:       /CN=A91301EE0000/serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
Certificate serial:       28F7920EF2627868C1A6CA644CC8B12FF5544E94
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
Manifest number:          3A
Signing time:             Thu 03 Jul 2025 12:45:29 +0000
Manifest this update:     Thu 03 Jul 2025 12:40:29 +0000
Manifest next update:     Fri 04 Jul 2025 15:27:29 +0000
Files and hashes:         1: 3F67057F77B86603B6C216FF577CB3146053E4E5.crl (hash: 599o8Goo9BU2WtJCg7BBR5e9DSJ9Y49KHPOPGm8HJSg=)
                          2: 3136352e39392e3132342e302f32332d3233203d3e20343031363832.roa (hash: 85gBMcl8T92cShSttg2IE1+cL7srToN1WMPpMffNR/c=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl
                          rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Jul 2025 15:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f7:92:0e:f2:62:78:68:c1:a6:ca:64:4c:c8:b1:2f:f5:54:4e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91301EE0000, serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
        Validity
            Not Before: Jul  3 12:40:29 2025 GMT
            Not After : Jul  4 15:27:29 2025 GMT
        Subject: CN=FB8317C0C56758F3F453825EF5787ACE5843A7F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:20:ac:6e:69:f3:ba:d3:f0:c6:e2:42:76:a1:
                    bd:0f:6e:cc:14:36:d7:f3:37:46:16:ff:27:7a:83:
                    4d:f2:5b:20:2f:22:d2:35:2d:0b:62:48:5a:a3:1c:
                    7b:33:f2:df:82:ec:6a:75:6c:6b:b3:1d:6b:79:95:
                    21:a5:8a:15:46:01:3d:27:15:0a:c2:f1:43:c1:2e:
                    72:ac:c7:19:56:a8:10:b1:a4:90:18:07:91:1f:99:
                    55:1a:7c:c4:4e:64:2c:83:f6:a4:99:ac:e8:5c:1d:
                    d1:70:f0:85:49:2b:54:a4:e3:21:82:05:a9:3f:98:
                    4b:e9:22:80:12:42:60:a9:59:49:39:cc:df:63:f7:
                    72:3b:91:6b:10:d4:84:6e:4d:be:16:0b:51:47:e3:
                    b1:60:e2:3c:59:18:37:c7:61:f6:29:cb:94:8a:94:
                    6c:dd:bd:dd:02:ef:34:e9:4a:b7:83:2d:0f:9a:65:
                    55:7c:81:08:c7:34:8d:5f:5a:40:5c:76:fa:55:b8:
                    e1:44:d7:4f:15:5a:92:5d:5c:d9:84:77:cc:78:35:
                    66:43:8f:4c:1f:61:d7:aa:56:ba:71:95:74:93:62:
                    12:b4:50:94:d7:6c:81:cb:78:07:6b:0f:7d:47:26:
                    c6:0b:99:60:06:18:5c:f3:ed:7f:42:93:4e:41:f4:
                    75:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:83:17:C0:C5:67:58:F3:F4:53:82:5E:F5:78:7A:CE:58:43:A7:F8
            X509v3 Authority Key Identifier:
                keyid:3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:2c:3c:aa:2d:94:bc:1d:a4:77:24:c8:50:a0:91:1a:0e:1d:
         d2:c3:6d:51:02:ee:13:b2:31:8e:50:93:9c:41:4d:69:f4:a6:
         97:68:23:6a:20:04:aa:54:03:34:c3:eb:16:53:48:32:ce:fd:
         ca:98:02:24:7d:07:61:13:a5:26:55:25:e5:9c:88:d0:a4:2a:
         8f:18:d3:32:dc:3a:5a:83:4a:c2:2d:fa:c6:48:32:d8:52:82:
         6b:69:b1:8e:1a:e3:3a:68:23:d3:db:eb:54:4a:25:ae:59:03:
         c8:67:2d:7d:a0:5c:77:74:2e:e8:4e:92:ad:9e:97:b0:7e:0f:
         5e:8d:52:3b:d9:fd:75:5e:40:52:06:8d:32:c2:76:dd:a8:f3:
         5f:1f:1e:ce:0c:92:09:07:0c:5b:a7:d3:5d:77:c8:d2:21:39:
         8d:ae:47:fa:67:1d:0d:b2:1b:50:d7:9c:4e:db:39:6d:2d:97:
         15:bd:bc:e1:73:e1:f8:92:69:6b:de:70:b1:55:e1:07:cf:bd:
         65:69:9f:5d:26:22:c8:03:68:30:d2:34:e6:d3:6e:7a:10:9f:
         30:c3:dc:10:f5:17:ed:90:3b:3d:17:15:03:d3:d9:6d:21:19:
         2b:9c:ed:b5:0d:27:b5:d4:f1:56:19:c6:fc:d6:38:79:14:ed:
         e2:65:b3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 22:29:56 2025 by rpki-client